4.9

CVE-2023-40691

EPSS 0.05%
Veröffentlicht 18.12.2023 21:15:08
Zuletzt bearbeitet 21.11.2024 08:19:58
Quelle psirt@us.ibm.com
Teams Watchlist Login
Unerledigt Login

IBM Cloud Pak for Business Automation 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1, and 22.0.2 may reveal sensitive information contained in application configuration to developer and administrator users.  IBM X-Force ID:  264805.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 5

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Ibm ≫ Cloud Pak For Business Automation Version18.0.0

Ibm ≫ Cloud Pak For Business Automation Version18.0.2

Ibm ≫ Cloud Pak For Business Automation Version19.0.1

Ibm ≫ Cloud Pak For Business Automation Version19.0.3

Ibm ≫ Cloud Pak For Business Automation Version20.0.1

Ibm ≫ Cloud Pak For Business Automation Version20.0.3

Ibm ≫ Cloud Pak For Business Automation Version21.0.1 Update-

Ibm ≫ Cloud Pak For Business Automation Version21.0.1 Updateinterim_fix_001

Ibm ≫ Cloud Pak For Business Automation Version21.0.1 Updateinterim_fix_002

Ibm ≫ Cloud Pak For Business Automation Version21.0.1 Updateinterim_fix_003

Ibm ≫ Cloud Pak For Business Automation Version21.0.1 Updateinterim_fix_004

Ibm ≫ Cloud Pak For Business Automation Version21.0.1 Updateinterim_fix_005

Ibm ≫ Cloud Pak For Business Automation Version21.0.1 Updateinterim_fix_006

Ibm ≫ Cloud Pak For Business Automation Version21.0.1 Updateinterim_fix_007

Ibm ≫ Cloud Pak For Business Automation Version21.0.1 Updateinterim_fix_008

Ibm ≫ Cloud Pak For Business Automation Version21.0.3 Update-

Ibm ≫ Cloud Pak For Business Automation Version21.0.3 Updateinterim_fix_001

Ibm ≫ Cloud Pak For Business Automation Version21.0.3 Updateinterim_fix_002

Ibm ≫ Cloud Pak For Business Automation Version21.0.3 Updateinterim_fix_003

Ibm ≫ Cloud Pak For Business Automation Version21.0.3 Updateinterim_fix_004

Ibm ≫ Cloud Pak For Business Automation Version21.0.3 Updateinterim_fix_005

Ibm ≫ Cloud Pak For Business Automation Version21.0.3 Updateinterim_fix_006

Ibm ≫ Cloud Pak For Business Automation Version21.0.3 Updateinterim_fix_007

Ibm ≫ Cloud Pak For Business Automation Version21.0.3 Updateinterim_fix_008

Ibm ≫ Cloud Pak For Business Automation Version21.0.3 Updateinterim_fix_009

Ibm ≫ Cloud Pak For Business Automation Version21.0.3 Updateinterim_fix_010

Ibm ≫ Cloud Pak For Business Automation Version21.0.3 Updateinterim_fix_011

Ibm ≫ Cloud Pak For Business Automation Version21.0.3 Updateinterim_fix_012

Ibm ≫ Cloud Pak For Business Automation Version21.0.3 Updateinterim_fix_013

Ibm ≫ Cloud Pak For Business Automation Version21.0.3 Updateinterim_fix_014

Ibm ≫ Cloud Pak For Business Automation Version21.0.3 Updateinterim_fix_015

Ibm ≫ Cloud Pak For Business Automation Version21.0.3 Updateinterim_fix_016

Ibm ≫ Cloud Pak For Business Automation Version21.0.3 Updateinterim_fix_017

Ibm ≫ Cloud Pak For Business Automation Version21.0.3 Updateinterim_fix_018

Ibm ≫ Cloud Pak For Business Automation Version21.0.3 Updateinterim_fix_019

Ibm ≫ Cloud Pak For Business Automation Version21.0.3 Updateinterim_fix_020

Ibm ≫ Cloud Pak For Business Automation Version21.0.3 Updateinterim_fix_021

Ibm ≫ Cloud Pak For Business Automation Version21.0.3 Updateinterim_fix_022

Ibm ≫ Cloud Pak For Business Automation Version21.0.3 Updateinterim_fix_023

Ibm ≫ Cloud Pak For Business Automation Version21.0.3 Updateinterim_fix_024

Ibm ≫ Cloud Pak For Business Automation Version21.0.3 Updateinterim_fix_025

Ibm ≫ Cloud Pak For Business Automation Version21.0.3 Updateinterim_fix_026

Ibm ≫ Cloud Pak For Business Automation Version22.0.2 Update-

Ibm ≫ Cloud Pak For Business Automation Version22.0.2 Updateinterim_fix_001

Ibm ≫ Cloud Pak For Business Automation Version22.0.2 Updateinterim_fix_002

Ibm ≫ Cloud Pak For Business Automation Version22.0.2 Updateinterim_fix_003

Ibm ≫ Cloud Pak For Business Automation Version22.0.2 Updateinterim_fix_004

Ibm ≫ Cloud Pak For Business Automation Version22.0.2 Updateinterim_fix_005

Ibm ≫ Cloud Pak For Business Automation Version22.0.2 Updateinterim_fix_006

Ibm ≫ Cloud Pak For Business Automation Version23.0.1 Update-

Ibm ≫ Cloud Pak For Business Automation Version23.0.1 Updateinterim_fix_001

Ibm ≫ Cloud Pak For Business Automation Version23.0.1 Updateinterim_fix_002

Ibm ≫ Cloud Pak For Business Automation Version23.0.1 Updateinterim_fix_003

Ibm ≫ Cloud Pak For Business Automation Version23.0.1 Updateinterim_fix_004

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.05%	0.149

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	4.9	1.2	3.6	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
psirt@us.ibm.com	4.9	1.2	3.6	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

https://exchange.xforce.ibmcloud.com/vulnerabilities/264805

Vendor Advisory

VDB Entry

https://www.ibm.com/support/pages/node/7096365

Patch

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2023-40691

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2023-40691

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2023-40691

EUVD